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METHOD AND SYSTEM FOR DEVICE MANAGEMENT 



TECHNICAL FIELD 



5 

The invention is concerned with a method and systeni for managing objects in 
devices In a device management system in a mobile network infrastructure. The 
system comprises a first server with a device management application using a first 
protocol and a second server with a device management appficatlon using a 
10 second protocol. 



BACKGROUND 

QSM. together with other technologies, is part of an evolution of wlretess- mobile 
15 telecommunication. The Global System for Mobile Communication (GSM). Is a 

standard for digital wireless communications with different sen/Ices, such as vole© 
. telephony. The Subscriber Identity Module (SIM) Inside GSM phones was 

originally designed as a secure way to connect Individual subscribers to the 

network but te nowadays becoming a standardized and secure application 
20 platform for GSM and nexl generation networks. 

The Mobile Station (MS) represents the only equipment the GSM user ever sees 
from the whole system. It actually consists, of two distinct entities. The actual 
hardware is the Mobile Equipment (ME), which consists of. the physical 
equipment, such as the radio transceiver, display and digital signal P'^^**"^". 

25 The subscriber infomiatlon is stored In the Subscriber Identity Module (SIM . 
implemented as a Smart Ca«J. With respect to the lemiinology used .n ihte 
document, The Mobile Station (MS) Includes the Mobile Equipment (ME) and the 
Subscriber Identity Module (SIM). The temi -Handsef is uSed as a synonym o 
the MobHe Equipment (ME) and the tem» "Device" as a synonym to The Mob.le 

30 Station (MS). 
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The mobile equipment is uniquely identified by the Intemallonal Mobile Equipment 
Identity (IMEI) being a unique code that corresponds to a specific GSM handset. 
The SIM card contains the International Mobile Subscriber Identity. (IMSI). 
identifying the subscriber, a secret key lor authentication; and other user 
5 Information. 

The tern, "device Identity information" comprises In the context of this document 
both equipment Information, such as the IMEI. and subscriber information, such 
as the MSISDN or IMSI. The IMEI and the IMSl or MSISDN are. however, 
independent and can thereby provide personal mobiiny. 

. 10 The MobUe Station Integrated Service Digital Network Number. MS.SDis.. is the 
etanda^l international telephone number used to identify a given «"'>^''^|^^'^^ 
• op^ator declares the subscription in a database inside the n-*^^^''^- 
. the correspondence between the IMSi and the MSISDN. By inserting the SIM 
• into another GSM terrr,inal. the user is able to receive and make calls from that 
15 terminal, and receive other subscribed services. 

A device management session includes e.g. authentication (user verification)^ 
device inventory (a device management application read which paramete.^ and 
appficatlons are Inste^lled In the telephone for future decisions, such as e.g^ 
updaTng, adding and deleting things from the installations, continuous 
ao pLisioning (a device management application e.g. updates P-^-^^Z Z 
telephone device, sends applications to the device, parfom^s softwarB and 
firmware updates), device diagnostics (error finding), etc. 
sending new settings over the air Is one simple way to provision a^devic^ wim^ 
configuration pammate^. such as connecf^ity Information (devK:e -^^^^"^^ 
25 receiving the settings to configure the phone, the Customer simply saves them^ 
. L phone and Is then able to use the se.ices. For the operator. s.mp..fi^ 
access to advanced sendees can bring higher usage rales, new revenue stieams. 
and reduced customer helpline coste. 



■i™^""" 4.«A Q RflA'b 0440; 25-AU6-04 13:22; ^^^^ ® 

SMARTTRUST SYSTEMS OY; 9 SSaU 0440, 

+358 9 5840 0440 

t35B DOHu ink.t.Patenl-ochreg.veri(Bl 

9004 -utf- 2 5 

Huvudfaxen Kosscm 

3 

As a result of technological development, networked and mobile/Wiretess devices 
are becoming more and more complex, and consequerttly, connected devices are 
also becoming more and more difficult Xo manage. Device managernent 
standardization Is an onrgolng Issue. The SyncML Initiative lias identified the 
5 complexity of tills Issue, and t»>e Importance for finding a universal solution for a 
device management protocol Syoclsfll. Is the open standard that drives data 
mobility by establishing a common language for communications between 
devices, applications and networte. 

Device management allows third parties to configure mobile devices on behalf of 
10 the end users. There are numerous cases, wherein device management is 
needed such as new device purchase, remote sen/ice management, software 
download, changing and adding sen/ices, and saivlce discovery and provisioning 
" etc: Device management applications are typically used by mobife sen/ice 
• providers. They are used for custor^ier ckre pUrposes and to Increase revenue by. 
15 effective value added servioe management. 

SyncML Device Management (Syncl^L Dlyrt) is a device management protocol for 
management of devices and appHoatlons. simplifying configuration, updates and 
support.. , 

Syncl^L Device Management Protocol (SyncML DM) is thus a standard for 
20 communication between devices and device management sender systems. The 
standardization body is OMA. Open Mobile Alliance. The device to be managed is 
equipped with a SyncML DM user agent in the device (l.e; temiinal or handset) 
that speaks the SyrwML DM language. 



25 



However; as was stated above, a mobile station often consists of two entities: the 
subscriber Wentity module (SIM) and the mobile equipment (ME), in a device 
management environment both entitles that makes up the "device- are of interest. 
Both those entities need to be subjects of device management operations. 
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PAGE 7 



Device ■nanagen.enl opem«ons tewa,d= the SIM card a« to . 
prcprtetaiV. 0»er-the-aU ^cure transpor. epeom«Hor e»«,ple By GSM SMS 
point-tcpolnt and •OS.-.r (SecuHir ■nechanfem, fa. Ihe SIM «ppllca«on tDO««) 
However the fcm.atllng of the <fe»lc« manaBemenl command, and tt» accees 
5 condition, to the SIM to a« cam (vendo* p,oprt«»y. However, marv 
^ SIM c«d, uee pn.prtola-y pWooote tor .««re «»n^ort. Thus. P^^cote 
ma„» both vendo, p-opdetaty and/or atandatdiaed depending on the ,ndn,Wu^ 

.nd SIM ca^. modle. Th- ^ «-m Im^-e. the need far 
manaoemont ptotocote In the device management environment m order to 
,0 mZirdU as a whole. The need far a multl^rotcc^ device manapemem 
Zltm stem. .horefare from the fact the. the moWIe devte^ o. »r«em 
o^e data emMe, reeW^g t>c.h on «« SIM can! and In the h«™d.e. «eK. 

■ t>..a en.»lee reeldlng In me Handi^ <l.e. Mil>«e E.^pmen. ^<^>'""^^ 
,5 by standardi^d Managed O^ecte (MO) aiep^ledhy the SyncML^P^^^^ 
■L propped epecfflee how the MOs may be managed (I.e. 
IledTby e remote ..nrer side component. For more information reference ie 
nlT fa etandard -SyncML Device Ma^gemant Standardized ob^ 
version 1.1-2. • - . 

enWiee residing ^ the SIM card, In lum, are '^'^'^^^ 
eLture o. «lee. This etmcture ie hlerarchica, and thare '"^^^ 
,.e. Bementa^ R«s (EF), Dedteated rite, (DF, and M^ter ^^-^ ^ 
mentioned ones being higheet M the hierarchy. More d«au. .bout SIM lliea can 
25 be found in the GSM standard ETSITS 100 877 V8.2.0. 

The SIM «l.e can be ,en»faV managed by rtandartzed commande for Bemofa 
Z ragemen. pFM). The acceae conditlcne for the tllee are, howeve. no^ 
ZIJL a, these are under .he con.., c. the application "^"^ 
» t^era^on wim «« networK operate, or service p^vlder -2„::„'t 

access condiUons may be dep««ient on the level of secunty applied fa the SIM 
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Da« Downlead me3«9e. Th. pa«me,erW », *e ^«'J>^°''''^^^^ 
„ a smgle command o, a W o. command, « b. 

,„fo<ma«on car b. found ,n «» GSM «andard ETSI TS 101 181 V8.3.0. 

Tha S.M card da« and aeMco. am no. manageable as g^^' 
m,«ged by «» SyncML. DM prcccd. h is possible to spec^ .bsm as Sy^ML 
ZZ^ <^ (M03), bu. me SyncML DM prolocol dees no, apec-y how . 
SyncML DM user agent In the handsel could manage me SIM. 



10 CeJKT OF THE INVENTION 

Tl» obiec of me invention N. to de«lop Improved m«hods «id systems ma, 

. irabXageln, o, me ^ ^. -^-^ 
both on the handset and the SIM. 



15 



20 
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SUMMARY OF THE INVENTION 

,„ tne method Of the Invention dev^e tnanaoement la P^^^^^ 
w.o.t. in devlcea in a device management system m a mobrte network 
objects .n devlcea in a ae ^ device management 

inlraslnjcture. The system comprises a first sender witn a ^ 

invokes management operations to be made oy me 
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application. The first management application then perfomr)9 the management 
operations to said devico, 

The system of the Invention manages objects In devices in ft device management 
5 system In a mobile network infrastnicture: The system of the Invention comprises 
a first server with a device management application using a first protocol, a 
second server with a device management application using a second protocol, an 
interface between them implementing protocol conversion, a database stonng 
mapping relationships between first protocol objects to be managed and second 
10 protocol objects to be rnanaged. and a device with second protocol objects to be 
managed. 

. . The preferable embodiments of the method of the invention are presented in the 

subclaims. 

The invention that enables remote management of mobile devices that requires a 
multi-protocol device management environment. 

,„ m» document. .h« terra SIM tile managernent (SFM> *" 
20 management operaHons towards SIM oa,*, That Mud« l»th the Over-The^ 

(OTA) transport and the formatting. 

,n this document, a system that Is able to manage both the handset ancTthe SIM 
card IS referred to as a Unified Device Management system (UDM). In the scope 
25 of UDM. both the SIM residing and the terminal residing data, applications and 
software are of Interest and must be managed. 

By the invention, a UDM application may manage both handset and SIM by the 
SyncML DM protocol. 

30 



15 
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Said interface in the Invention especially covers adaptive processes where SIM 
residing , data and applications are presented as, and managied lii the same way 
as OMA-DM managed objects (MOs) (OMA-DM protocol and SynclVIL-DM 
protocol mentioned earlier refers to tiie same protocol). This is acliieved by. an 
3 innovative mapping of date objects and device management operations from 
different technologies and protocols onto one desired protocol, Hkia e.g. OlSflA-DM 
protocol. . .> • 

The invented adaptive processes covred by the Interface and emtiodied are 
10 referred to as Vh& Adaptive Protocol Conversion (APC) system In this document 
forward. The APC system in the invention rnaKes sure that a device management 
appRcation, on user level, can 'implement a device management application, using 
onV the desired, protocol, «jjpb as the pMA-DM j{SyncML Diy4) protocol. 

Seen from the point of vtew of a device management application, ihe mobile 
1.5 device that comprises two entitles that requires different device management 
protocols, can be managed as one uniform logical entity by. In practice, only one 
device management protocol. 

By the invented method and system, a unified slngle-protocol device management 
application development environment is exposed. Thai way the application level 
20 development of device management use-cases can be done simply by one and 
the same device management protocol. Whatever conversions and data mapping 
required to manage the SIM card is handled "under the surface' by the invented 
method and system. The prefered embodiment of the method and system of the 
invention is where the unified application development erivironment takes place 
25 over a standardised device management protocol such as OMA-DM (SyncML- 
DM). 

In the invention, gateway features facilitate adaptive protocol conversion, including 
data entity mapping according to strictly applied dedicated device descriptions and 
30 proxy features facilitating device management sessions between device 
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management components (i.e. clients and senders) that are not using oho and the 
eame device meuiagement protocol. 

The system comprises a dedicated gateway/proxy application program and 
S database. 

To summaifea. by the Invention, a devJce management applicsation may manage 
data entities residing both In the handset and on the SIM by the OMA-DM 
protocol. 



In the tollowing, the Invention is described by means of some advantageous 
embodiments and figures, the details of v^^hich the Invention is not restricted to. 



15 FIGURES 

Figure 1 is a view of a prior art target environment without the invention 

I Figure 2 is a view of an environment that Includes the entities that Implements the 
method of the Invention 

Figure 3 is a signal diagram of the method of the invention 

20 Figure 4 displays a schematic view of the conversion map between SIM files and 
managed objects : 



DETAILED DESCRIPTION \ . 

Figure 1 is a view of a prior art target environment without the invention. The 
25 target environment is presented as an example of a telecommunication network 1 
in which the invention can be used. The telecommunication network 1 comprises 
one or more devtees to be managed, of v>fhich one device 2 and a device 



SENT BY: fiMARTTRUST SYSTEMS OY; 



+356 9 58^*0 0440; 

+358 9 5840 0440 



25-AUQ-04 13:23; 



PAGE i2 



Ink. t. Patent- och reg-verket 

700/* -ua- 2 5 

Huvudfoxon Koison 



10 



15 



20 



25 



management sen/er 3 can be seen In figure 1 . The device 2 to be managed is In 
this example a mobile device 2 belonging to the mobile network infrastructure 4. 

The Mobile Station (MS) The device) represents the only equipment the QSM 
user ever sees from the whole system. It actually consists of two distinct entities. 
The actual hardware is the Mobil© Equipment (ME) (^handset) marked with 
reference number S in figure 1, which consists of the physical equipment, such as 
the radio transceiver^ display and digital signal processors. The subscription 
information Is stored in the Subscriber Identity Module (SIM), marked with 
reference numt>er 6 in figure 1 , Implemented as a Srtiart Card. 

In this context, the mobile network infrastructure Includes all components and 
functiorvs needed for mobile data communication, both QSM and Internet included. 
The mobile device 2, in turn, includes both the handset 5 and tKe StM .card 6. 
Thus, the mobile device 2 has accessrto the mobile network infrastructure 4. 

SyhcML Device Management Protocol (SyncML DM) Is one standard for 
communication between devices and applications in device manaigement 
systems, if this standard is used, the device to be managed, i.e.. the mobile statipn 
2 in figure 1 , is equipped with a Syncl^llL user agent 7 in the device 2 that speaks 
the SyncML DM language. With other device management protocols, the user 
agent 7 is a user client for the particular device management application used In 
the device management system 9, The data entities residing in the handset 5 (i.e. 
Mobile Equipment (ME)) are represented by standardized Managed Objects (MO) 
16. When the protocol used is SyncML DM, these are specified by the SyncML 
DM protocol. 

The data entities residing In the SIM card, In turn, are represented by a logical 
stmcture of files, including the Elementary Files (EF) having reference number 8 
in figure 1. 
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The SIM files 8 can be remotely managed by standardized commands for remote 
file management by means of a standardized remote file management application 
16, such as RFM, in the device management system 9. The device management 
.eyetem 9 of figure 1 also has a device management application 10 for manning 

S the managed objects (MO) 15 using a device management protocol, which e.g. 
can be SyncML DM, which is typically used by mobile service providers. The 
applications 10. 16 are In reality on different servers and thus the sen^r 3 has to 
be considered as a common expression for applications on server side. The 
applications are used for customer care purposes and to Increase reyenue by 

10 effective value added sen/ice management 

Thus, in summary, the mobile device 2 of figure 1 comprising the handset 5. and 
ttie SIM card 6 is subject of device management In a multl-protocol'm6l5(lle;xtevice 
management environment; The data entftles 15, i.e. the managed^ objects, In the 

15 handset are then manipulated by management operations earned -over a 
standardized protocol, i.e. the SyncML-DM protocol In tfiis example. The user 
agent 7 is the client side component required to carry out device management 
operations over the SyncML-DM protocol. The data entities 8, I.e. the elementary 
files, in the SIM card may in tum be manipulated by management operations 

20 canied over Remote File Management (RFM) protocols. The data entitles. MO's 
and EPS. may not be managed over the same device management protocol. 

However, via the adaptive protocol conversion provided by the Invention, by 
means of the APC system rnentloned, the EPs are presented as manageable 

25 over the same protocol as the MO's. Figure 2 is a view of an environment that 
includes the entities that Implements the method of the Invention In addition to 
those presented In figure 1. The system 1' In figure 2 comprises components 
residing on both the mobile device 2 In figure 2 and on the seiver side 3 in figure 
2. Again the sender side In the reali^ consists of several servers, one for each 

30 device management application and one for the APC system interface. The server 
including the APC system interface 14 is an own server between the different 
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The^ ARC system provides the adaptive protocol conversion features by exposing 
a device description of the SIM EPs acoordin to the OMA-DM device description 
framework, arid implementing the same in the ADC conversion map. 

5 Figure 4 displays a echematic view of the conversion map (reference number 17). 
The APC conversion map provides a lookup where SIM files (reference nunr>ber 
19) are mapped onto OMA-DM MC^s (reference number 18). An OMA-DM MO is 
identified by a URI, whereas a SIM file is identified by a hexadecimal code (and an 
optional human readable file name). The conversion map also provides a lookup 
10 for protocol conversion. Device management commands included in the OMA-DM 
protocol (reference number 20) corresponds to an RFM protocol command 
(reference number 21 ) with the equivalent functional meaning. 

Actually the protocol conversion Is more complex than what is illustrated In figure 
15 4. RFM protocol commands carried over-the-air are often SIM card type (vendor) 
proprietary. Therefore the APC conversion map holds information about the 
correct RFM protocol equivalent for a wide variety of SIM card types. A lookup In 
the APC conversion map requires that the SIM card type as an input parameter. 
The mapping of protocol command equivalents is not done one-to-one, Instead 
20 one-to-many. This tact clearly illustrates the enormous benefit of the APC system 
in a mobile device management system. 
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CLAIMS 

1* Method for device management by managing objects In devices In a device 
management system in a mobile network infrastructure, the system comprising 
5 a first server with a first device management application using a first protocols . 
a second server with a second device management application using a second 
protocol, an Interface between them and a device with objects to be managed, 
the method being 

characterizedby the following steps In combination 
10 a) the first management application initiating a device management session 
with. the interface in order to manage the objects In said device, 
b) the interface translating the objects to be managed into a form understood 
by the second management application and Invoking management operations • 
to be made by the second management application, 
15 c) the first management application performing the management operations to 
said device. 

a Method of claim 1, characterized by the further steps In which 
d) the first management application responds to the Interface, 
20 e) the interface translates the objects to be managed into a form understood 
by the first management application, and 

f) the first management application continues said device management ., 
session with the Interface, . . 

25 3. Method of claim 1. characterized in that the mobile network 
infrastructure comprises the QSM network and a public network, such as 
internet. 



30 



4. 



Method of claim 2, characterized In that the device with the objects to 
be managed is selected from a SIM card in a mobile station, a USIM card in a 
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mobHe station, a handsel in a mobile station, and a smart card in a computer 
connectod to a handset in a mobile station. 

5. Method of any of claims 1-3, characterized in that the first device 
5 management application uses the SyncML DM protocol. 

6. Method of claim .3 or 4, c h a r a c t e r i z e d in that the device with the 
objects to be managed te the SIM card in a mobile station and the second 
device management application uses a SIM File Management (SFM) protocol. 

10 

7. Method of any of claims 1 - 6. c h a r a c t e r i z e d in that In the translation of 
step b), the data objects to be managed are OMA-DM managed objects that 
are mapped onto data entities residing , on SIM understood by a SIM File 
Management (SFM) protocol . • 

15 

8. Method of claim 7 c h a r a c t e r I z e d In for each OMA-DM protocol 
command, the translation te performed by selecting the appropriate RFM 
protcol command equivalent based on the mobile device type, more 
specifically, the SIM card type. 

20 

9. Method of any of claims 1 - 8, c h a r a c 1 e r I z e d in that after step a), the 
interface checks the identity of the device by means of a subscription Wer>tlty, 
such as IMSi or MSISDN, and handset Identity, such as the IMEI from a 
repository In the infrastructure- 
's 

10. Method of claim 9. c h a r a c t e r I z e d in that the RFM protocol commaind 
Includes also the selection of the transport channel. 

. 1 1. Method of any of claims i - ID, c h a r a c t e r i z e d In that the interface 
30 translating the objects to be managed is an application maWng use of a 



25-AUQ-04 13:25; PAGE 1D/24 

.Ink. t Patent- ochrfig.verket 
• • mL -U8- 2 5 

HuvudfoKen Kossan 



SENT BY: SMARTTRUST BYSTEMS OY; +358 9 58^ 0440; • 2B-AUG-04 13:25; PAGE 19/24 

+358 9 5840 0440 

tnK.tP5rt8nt-ochTe9.veiket 

. HuvucKoKen Kosson 

conversion map holding the relationships between objects to be managed of 
different protocols. 

12. System for managing objects In devices In a device management system in a , 
S mobile network 'mfrastructure, the system comprising 

a first sen^r with a first device management application using a first protocol, 
a second server with a second device management application using a second 
protocol, 

an interface between them implementing protocol conversion, 
to a database storing mapping relationships between first protocol objects to be 
managed and second protocol objects to be managed, and 
a device with second protocol objects to be managed. 

13.System of claim 12. c h a r a ct e r I z e d in that the mobHe neiwork 
15 Infrastructure comprises the GSM network and a public network, such as 
internet 

14. System of claim .1 2 orl 3, c h a r a c t e r i z o d in that the device with the 
objects to be managed is selected from a SIM card In a mobile station, an . 
20 USIM card in a mobile station, a handset in a mobile station, and a smart card 
in a computer connected to a handset In a nwbile station. 

IS.Systam of claim 12. c h a r a c t © r i z e d in that said first protocol is the 
SyncML DM protocol. 



25 



le.System of claim 14 and 15. o h a r a c t © rl z e d ir> that the device with the 
objects to be managad is the SIIVI card In a mobile station and said second 
protocol is a SIM File Management (SFM) protocol. 



30 



17. System of any of claims 12 - 16. c h a r a c t e r i z e d In that the first protocol 
objects to be managed are managed Objects (MO) according to the SyncML 
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DM protocol and the second protocol objecte to be managed are SIM files 
according to a SIM File Management (SFM) protocol. 
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ABSTRACT Huv«*dftwen«o««»" 

In the method and system of the Invention device nr,anagement Is performed by 
managing objects In devices In a device management system In a mobile network 

5 infrastructure. The system comprises afirst server with a first device management • 
application using a first protocol, a second sen/er with a second devce 
management application using a second protocol, an interfaoe between them and 
a device with ob|ects to be managed. The first management application Imbates a 
device management session with the interface In order to manage the objects .n 

10 said device. The interface translates the objects to be managed Into a form 
understood by the second management application and Invokes management 
operations to be made by the second management appficatton. The first 
management appiicatioh then performs the ..lanagement operations to said 
device. The system of the Invention comprises said first sender, said second 

15 server. aaW Interface between them implementing protocol conversion, and a 
^ database storing mapping relationships between first protocol objecte to. be 
managed and second protocol objects to be managed, and a device with second 
protocol objects to be managed. 

20 FIG. 3 . . 
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APC conversion map 



^Managed object 



SIM file 



<LocURl>./slmfHes/w/fb/bylecode</LocURl> 
<:LooURI>./«imfilefi/wIb/lar</LooURI> 



DFwiB : 2700 / EFbvtecode • 6F03 
DFwiB : 2700 / EFtar : 6F04 



DM command 



RFM command 



<R0plac0> 

<D©lete> 
<;Get> 



Equivalent far SIM card type 1 . 
Equivalent for SIM- card, type 2 



Equivalent for SIM card type 1 
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FIG. 4 



